Cloud Network Engineer

AmeriSave Mortgage Corp.

6d•$115,000 - $150,000•Remote

About The Position

AmeriSave Mortgage Corporation is currently seeking a Cloud Network Engineer to join our Network Infrastructure team. This role supports enterprise network and network security architecture for AmeriSave Mortgage, spanning multiple Azure regions, OpenShift microservice clusters, corporate offices, and our SASE and edge security platforms.

Requirements

At least 7 years of enterprise networking experience, with a minimum of 4 years focused on cloud networking (Azure preferred).
Hands-on production experience administering FortiGate firewalls.
Demonstrated Azure networking experience (VNETs, NSGs, UDRs, ExpressRoute, Private Link, native load balancing).
Working experience with a SASE platform — FortiSASE strongly preferred.
Practical Kubernetes/OpenShift networking experience, including CNI behavior, services, and network policy.
Configuration experience with Traefik or NGINX ingress controllers.
Production experience with Cloudflare — WAF, load balancing, and DNS.
Solid protocol fundamentals: BGP, OSPF, DNS, DHCP, TLS/PKI, VRRP, RADIUS/TACACS+.
Scripting and automation ability (Python, PowerShell, or Terraform) with Git-based workflows.
Strong attention to detail, problem analysis, and problem-solving skills.
Excellent written and verbal communication skills; ability to work independently and as part of a team, including after hours support as needed.
BS degree in Computer Science, Engineering, MIS/CIS, or a related subject, or equivalent experience.

Nice To Haves

Fortinet NSE 4+ certification
Microsoft AZ-700 (Azure Network Engineer Associate)
CCNA/CCNP
CKA (Certified Kubernetes Administrator)
FortiADC, FortiManager, and FortiAnalyzer experience
Experience with certificate lifecycle automation platforms
Experience with observability tooling such as Datadog
High-speed internet required for remote work, Cable or Fiber ONLY with the ability to connect via Ethernet. Minimum speeds: 70/30 Mbps (basic), 200-300/35-70 Mbps (shared), 500-1,000/100+ Mbps (heavy use).

Responsibilities

Architect, deploy, and troubleshoot Azure network topologies including VNETs, peering, user-defined routing, Private Link/Private Endpoints, Virtual WAN, Application Gateway, Azure Load Balancer, NSGs, and hybrid connectivity via ExpressRoute and IPSec.
Administer and troubleshoot FortiGate firewalls — policy design, IPS, web filtering, SSL inspection, SD-WAN, and Layer 3/4 segmentation — across cloud and on-premise environments.
Support and administer Cisco Meraki cloud-managed networking across MX security appliances, MS switches, and MR wireless access points — including dashboard and template configuration, SD-WAN, VLAN and SSID design, firmware management, and corporate/branch office deployments.
Operate and tune the FortiSASE platform: ZTNA, cloud-delivered secure web gateway, SPA/SIA tunnels, PoP selection, and identity-aware access policy for the remote workforce.
Design and support Kubernetes/OpenShift networking (OVN-Kubernetes SDN), including ingress/egress control, service exposure, and granular network policy across multi-cluster deployments.
Configure and troubleshoot ingress controllers — Traefik and/or NGINX — covering routing rules, TLS termination, certificate handling, and upstream service health.
Manage Cloudflare: WAF custom and managed rules, bot management, load balancing and origin pools, DNS zone administration, and Zero Trust policy.
Maintain internal and external DNS, certificate lifecycle, and load balancer (FortiADC) configurations.
Partner with application, security, and cloud teams on deployments, incident response, and root cause analysis.
Produce accurate network diagrams and documentation; perform changes in accordance with established SOP and change management guidelines.
Configuration of DataDog Network monitoring and alerting